Amendments to the Claims; 



This listing of claims will replace all prior versions, and listings, of claims 
in the application: 

Please amend the claims as follows: 

1. (Currently amended) A graphical user interface (GUI) for a capture system, the 
GUI comprising: 

a search editor view to enable a user to author and edit parameters of a 
search that mines of tags of objects captured by the capture system to be defined, 
the capture system to intercept and store network transmitted objects according to 
a capture rule: 

a capture rule view to enable parameters of the capture rule to be defined . 

2. (Currently amended) The GUI of claim 1, wherein the parameters definable 
through the search editor view is configured to enable the user to author the 
s e arch to include both indexed and non-indexed search criteria. 

3. (Currently amended) The GUI of claim 1, wherein the definable search editor 
view enables the user to sp e cify parameters include one or more of a plurality of 
search criteria, the search criteria includin g comprising: 

a content type, 
a protocol, 
a_key words,; and 
a word patterns. 

4. (Original) The GUI of claim 3, wherein the search criteria further include a 
source address, a destination address, a size range, and a temporal range. 

5. (Currently amended) The GUI of claim 1 , wherein the definable parameters of 
the search editor view e nable s the user to specify one or more of a plurality of 
search criteria, the search criteria including comprising: 
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an email source, 
an email destination, 
and an email carbon copy, 
an email subject, and 
message keywords. 

6-21. (Canceled) 

22. (New) A capture system comprising: 

a packet capture module to extract data packets from a data stream; 

an object assembly module to reconstruct a flow of at least one object from the 

extracted data packets; 

an object classification module to classify the at least one object and to 

deconstruct the flow into at least one object; 

an object store module to store the at least one object; and 

a graphical user interface (GUI) module to provide a GUI including a search view 

to allow for the authoring, editing, scheduling, and viewing of searches of stored 

tags, 

23. (New) A method comprising: 
capturing data packets from a data stream; 

reconstructing said data packets into a copy of an original object; 
determining if the copy of the original object should be stored based on a capture 
rule; 

generating a tag for the copy of the original object; 

storing the copy of the original object and the tag if it is determined that the copy 

of the original object should be stored based on the capture rule; 
discarding the copy of the original object if it is determined that the copy of the 

original object should not be stored based on the capture rule; and 
generating a graphical user interface (GUI), the GUI including a search view to 

allow for the authoring, editing, scheduling, and viewing of searches of 

stored tags, 

24. (New) The method of claim 23, further comprising: 
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discarding the tag if it is determined that the copy of the original object should not 
be stored based on the capture rule. 

25. (New) The GUI of claim 1, wherein the search is of tags of stored objects. 

26. (New) A method comprising: 

presenting a graphical user interface (GUI) for a capture system, wherein the GUI 
comprises one or more views including, 

a search editor view to enable parameters of a search of tags of objects 
captured by the capture system to be defined, the capture system to intercept and 
store network transmitted objects according to a capture rule; and 

a capture rule view to enable parameters of the capture rule to be defined. 
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